The XMPP Blog

Vulnerability in XMPP Server Dialback Implementations

Some implementations of the XMPP Server Dialback protocol have not been checking dialback responses to ensure that validated results are correlated with requests. Please see http://xmpp.org/resources/security-notices/server-dialback/ for detailed information about this important security notice.

Posted by stpeter on August, 21, 2012 - filed under misc